ITS Standards Exception - Password Policy Exception

Request an exception to the County’s standard password policy, including expiration intervals or complexity requirements.

Description and Details

The County enforces a standard password policy to ensure strong security practices across all systems. This includes requirements for password complexity, minimum length, and expiration frequency.

Employees who need a deviation from this standard — such as an extended expiration period, a waiver of complexity rules, or the use of a nonstandard authentication method—may request an exception with valid business justification.

Each request is reviewed individually by ITS Information Security. If approved, the exception may apply only to specific systems, user accounts, or timeframes.

Who Can Submit This Request?

Any Gwinnett County employee with a valid business or technical justification.

Required Approvals

  • Manager Approval

  • ITS Information Security

  • Chief Information Security Officer (CISO)

Fulfillment Time Frame

Within one business day following manager approval. Security reviews may require additional time depending on system scope and impact.

Support Contacts

For any questions, comments, or concerns, please contact the IT Service Desk.